last executing test programs: 11.098817081s ago: executing program 4 (id=26): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000380)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x64, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0xc, 0x100}}}}}}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 10.950804424s ago: executing program 4 (id=28): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c93010000c00050017e30800aa56b2e2b0a9596e85658874df16"], 0x15) 10.66505471s ago: executing program 4 (id=30): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shutdown(r0, 0x1) 10.60724762s ago: executing program 4 (id=32): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06", 0x0, 0x0, 0x8000, 0x4}, 0x50) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000480)=""/248, &(0x7f00000000c0)=""/74, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 10.501125623s ago: executing program 4 (id=34): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.654334148s ago: executing program 4 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 4.603841359s ago: executing program 3 (id=74): syz_usb_connect(0x5, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090401"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$vim2m(0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0xffff, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0xa70410b) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00\x00', 0x2}], 0x1) 3.986582301s ago: executing program 2 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x38, r1, 0x1, 0x1070bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x1}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x8050) 3.588999299s ago: executing program 1 (id=79): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_aio12_8\x00', [0x4, 0x3, 0x10000, 0x4, 0x5, 0x6, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0x2000e, 0xe69, 0x3c, 0x8, 0x75dd, 0x0, 0xfffffff8]}) 3.415891702s ago: executing program 2 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000600)=""/167, 0xa7}, {&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000a40)=""/231, 0xe7}], 0x4}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x5, 0x10122, 0x0) 3.381677683s ago: executing program 2 (id=82): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x10000005}) 3.300466665s ago: executing program 2 (id=83): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.063887889s ago: executing program 1 (id=84): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="580100001000130428bd70000000000000000000000000000000b40b000000000000676362f6dd214cd700000021a3c1b800ffffac140000000000004e220000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa0000000000000000000000000400000000000000070000000000000000000000000000000000000000004000ffffffffffffffff00000000000000007f00000000000000000000000000000000000000000000000800000000000000ce000000000000000000000000000000f60000000000000000000000000000000000000002000101000000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040"], 0x158}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4000844) 3.06368621s ago: executing program 0 (id=85): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x14, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 2.222264586s ago: executing program 1 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x880) 1.50487077s ago: executing program 0 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.403920042s ago: executing program 3 (id=88): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, 0x0, &(0x7f0000000300)) 1.382712182s ago: executing program 1 (id=89): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80c406, &(0x7f00000005c0)=ANY=[], 0xff, 0x2bc, &(0x7f0000000180)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000000), 0x4) mknod$loop(&(0x7f0000004500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x230, 0x0) execve(0x0, 0x0, 0x0) 1.196578766s ago: executing program 3 (id=90): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40404) r1 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) shmdt(r1) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x77359400}}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) 907.193312ms ago: executing program 3 (id=91): open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) unshare(0x2040400) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000440)={0x0, &(0x7f0000000400)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x200000402) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x200, 0x80000001) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x18}}, 0x4010) sendmsg$tipc(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000000)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x59, 0x202, 0x1, 0xc}) 756.085055ms ago: executing program 0 (id=92): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) close(0x3) 367.264773ms ago: executing program 1 (id=93): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x8, "afacd2119ca94c6b377526aeb5ab2a81fc0e3d99f20900"}) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2fe}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) close(0x3) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 367.114883ms ago: executing program 2 (id=94): write$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e0209095c0009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 364.821932ms ago: executing program 3 (id=95): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) listen(r0, 0x0) 228.000815ms ago: executing program 0 (id=96): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa0000000000000000000000000400000000000000070000000000000000000000000000000000000000004000ffffffffffffffff00000000000000007f00000000000000000000000000000000000000000000000800000000000000ce000000000000000000000000000000f60000000000000000000000000000000000000002000101000000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040"], 0x158}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4000844) 212.679156ms ago: executing program 3 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 183.933276ms ago: executing program 2 (id=98): syz_usb_connect(0x5, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090401"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$vim2m(0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$pptp(0x18, 0x1, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0xffff, @dev}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)='\x00\x00', 0x2}], 0x1) 139.592887ms ago: executing program 1 (id=99): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3445}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) 138.952187ms ago: executing program 0 (id=100): openat$6lowpan_control(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_io_uring_setup(0x2f5, &(0x7f0000000240)={0x0, 0x75a, 0x800, 0x2, 0x22ab}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=101): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f00000001c0)={0x4, 0x7c56, 0x1, {0x1, @win={{0x80000002, 0x9000000, 0x8, 0xf8000000}, 0x0, 0x8001, 0x0, 0x8000, 0x0, 0x3}}, 0xfffffe01}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. [ 57.714050][ T4172] cgroup: Unknown subsys name 'net' [ 57.829361][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.280089][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.312932][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 61.322547][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 61.380627][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 61.466152][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.485216][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.492316][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.501110][ T4183] device bridge_slave_0 entered promiscuous mode [ 61.521418][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.528541][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.537138][ T4194] device bridge_slave_0 entered promiscuous mode [ 61.565141][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.572222][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.580726][ T4183] device bridge_slave_1 entered promiscuous mode [ 61.591888][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.599274][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.607598][ T4194] device bridge_slave_1 entered promiscuous mode [ 61.664720][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.671817][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.680385][ T4184] device bridge_slave_0 entered promiscuous mode [ 61.707928][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.717452][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.725225][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.733020][ T4184] device bridge_slave_1 entered promiscuous mode [ 61.741697][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.757491][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.785691][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.818426][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.828557][ T4196] chnl_net:caif_netlink_parms(): no params data found [ 61.848481][ T4183] team0: Port device team_slave_0 added [ 61.870053][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.884401][ T4183] team0: Port device team_slave_1 added [ 61.901243][ T4194] team0: Port device team_slave_0 added [ 61.937176][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.944423][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.952346][ T4190] device bridge_slave_0 entered promiscuous mode [ 61.961404][ T4194] team0: Port device team_slave_1 added [ 61.977098][ T4184] team0: Port device team_slave_0 added [ 61.992995][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.000244][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.008330][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.024658][ T4184] team0: Port device team_slave_1 added [ 62.041837][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.048937][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.075774][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.104566][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.111541][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.137703][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.154401][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.161359][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.187587][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.214332][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.221316][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.247407][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.271718][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.281955][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.289374][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.315801][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.346039][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.353338][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.361328][ T4196] device bridge_slave_0 entered promiscuous mode [ 62.370863][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.380452][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.387673][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.414095][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.436722][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.444061][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.451835][ T4196] device bridge_slave_1 entered promiscuous mode [ 62.505988][ T4190] team0: Port device team_slave_0 added [ 62.515612][ T4194] device hsr_slave_0 entered promiscuous mode [ 62.522594][ T4194] device hsr_slave_1 entered promiscuous mode [ 62.547307][ T4190] team0: Port device team_slave_1 added [ 62.570970][ T4183] device hsr_slave_0 entered promiscuous mode [ 62.578044][ T4183] device hsr_slave_1 entered promiscuous mode [ 62.584840][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.592763][ T4183] Cannot create hsr debugfs directory [ 62.600699][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.629333][ T4184] device hsr_slave_0 entered promiscuous mode [ 62.636328][ T4184] device hsr_slave_1 entered promiscuous mode [ 62.642911][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.650789][ T4184] Cannot create hsr debugfs directory [ 62.666489][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.676188][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.683475][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.710332][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.751383][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.758584][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.784748][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.847753][ T4196] team0: Port device team_slave_0 added [ 62.887515][ T4196] team0: Port device team_slave_1 added [ 62.905823][ T4190] device hsr_slave_0 entered promiscuous mode [ 62.912723][ T4190] device hsr_slave_1 entered promiscuous mode [ 62.919581][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.928062][ T4190] Cannot create hsr debugfs directory [ 62.954143][ T4186] Bluetooth: hci2: command 0x0409 tx timeout [ 62.963838][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 62.969965][ T4186] Bluetooth: hci0: command 0x0409 tx timeout [ 63.033545][ T4186] Bluetooth: hci3: command 0x0409 tx timeout [ 63.040268][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.047415][ T4186] Bluetooth: hci4: command 0x0409 tx timeout [ 63.048183][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.079838][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.119795][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.127365][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.153471][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.199020][ T4196] device hsr_slave_0 entered promiscuous mode [ 63.205991][ T4196] device hsr_slave_1 entered promiscuous mode [ 63.212451][ T4196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.221741][ T4196] Cannot create hsr debugfs directory [ 63.347142][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.359948][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.377544][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.386846][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.446811][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.465642][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.475118][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.487858][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.558679][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.571894][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.584191][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.593112][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.602135][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.614849][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.624972][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.650724][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.678061][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.687212][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.697436][ T247] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.704754][ T247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.746378][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.754907][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.763585][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.772101][ T247] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.779244][ T247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.796169][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.806036][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.815282][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.843506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.854568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.866780][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.891859][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.901534][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.911274][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.943925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.958982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.990892][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.008388][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.021848][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.030199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.039655][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.055544][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.066530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.075706][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.094573][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.106495][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.113788][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.128020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.136314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.147093][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.195280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.204305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.213102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.225202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.237632][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.244743][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.252722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.262524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.271030][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.278114][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.286467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.295669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.305233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.317951][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.343258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.354647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.366643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.376506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.390150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.423847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.432214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.443604][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.452687][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.461537][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.468789][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.477925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.487924][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.496687][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.503804][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.516196][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.525557][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.541718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.550890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.590280][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.603756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.611277][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.622359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.634936][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.647441][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.664296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.679375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.688587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.731338][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.740106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.752482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.761348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.771853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.781260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.790539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.799118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.807019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.818400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.827325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.848310][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.858826][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.868115][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.882073][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.893217][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.900302][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.935498][ T4183] device veth0_vlan entered promiscuous mode [ 64.942675][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.951589][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.962264][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.971253][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.978374][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.989921][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.998799][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.007793][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.016390][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.033567][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 65.034898][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.039736][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 65.063557][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 65.079912][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.088293][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.104721][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.112649][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.121586][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.123436][ T4245] Bluetooth: hci4: command 0x041b tx timeout [ 65.131589][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.136897][ T4245] Bluetooth: hci3: command 0x041b tx timeout [ 65.150325][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.159078][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.168096][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.184118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.192489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.202442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.211652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.221485][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.228629][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.237027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.245683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.257263][ T4183] device veth1_vlan entered promiscuous mode [ 65.276356][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.301140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.317030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.334317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.342990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.352635][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.359769][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.368403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.377526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.399635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.408103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.425576][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.444878][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.466273][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.482308][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.492146][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.501194][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.509810][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.535574][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.543844][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.552474][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.575151][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.582618][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.609136][ T4183] device veth0_macvtap entered promiscuous mode [ 65.627584][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.642701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.652218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.664526][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.672911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.686122][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.697061][ T4183] device veth1_macvtap entered promiscuous mode [ 65.719525][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.741982][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.762584][ T4194] device veth0_vlan entered promiscuous mode [ 65.772269][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.781050][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.795158][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.802654][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.817852][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.830081][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.841460][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.876734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.892773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.911023][ T4194] device veth1_vlan entered promiscuous mode [ 65.924302][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.937184][ T4184] device veth0_vlan entered promiscuous mode [ 65.956574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.974272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.997329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.007162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.017764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.027251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.038016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.046224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.058114][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.077701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.087352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.096840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.106281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.125419][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.135445][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.154521][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.165962][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.203384][ T4184] device veth1_vlan entered promiscuous mode [ 66.212075][ T4194] device veth0_macvtap entered promiscuous mode [ 66.253525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.261550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.274222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.282283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.290317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.297831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.306577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.317994][ T4194] device veth1_macvtap entered promiscuous mode [ 66.327540][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.391514][ T4184] device veth0_macvtap entered promiscuous mode [ 66.405137][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.415982][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.429299][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.441033][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.444035][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.459035][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.459566][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.469885][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.482902][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.492497][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.501420][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.510446][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.520031][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.528237][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.536161][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.545022][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.556326][ T4196] device veth0_vlan entered promiscuous mode [ 66.565840][ T4184] device veth1_macvtap entered promiscuous mode [ 66.576782][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.587430][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.599528][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.618314][ T4196] device veth1_vlan entered promiscuous mode [ 66.628168][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.637946][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.651336][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.660321][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.669970][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.678751][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.711904][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.721474][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.752413][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.765352][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.774244][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.795297][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.806704][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.816897][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.834633][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.846807][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.879980][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.889910][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.931205][ T4190] device veth0_vlan entered promiscuous mode [ 66.949754][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.959648][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.972517][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.977264][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.990209][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.000766][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.011853][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.022841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.032977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.042041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.055271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.067076][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.076521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.085497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.100457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.108663][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.121905][ T4196] device veth0_macvtap entered promiscuous mode [ 67.131174][ T4245] Bluetooth: hci2: command 0x040f tx timeout [ 67.137370][ T4245] Bluetooth: hci1: command 0x040f tx timeout [ 67.143899][ T4245] Bluetooth: hci0: command 0x040f tx timeout [ 67.151604][ T4190] device veth1_vlan entered promiscuous mode [ 67.179890][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.189153][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.219182][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 67.226754][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 67.240006][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.249309][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.285696][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.296456][ T4196] device veth1_macvtap entered promiscuous mode [ 67.306632][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.318346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.327040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.342055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.366714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.378654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.427603][ T4190] device veth0_macvtap entered promiscuous mode [ 67.470018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.479357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.490263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.502663][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.516514][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.527837][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.540000][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.550459][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.561375][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.579979][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.589412][ T4190] device veth1_macvtap entered promiscuous mode [ 67.656160][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.689154][ T4310] loop2: detected capacity change from 0 to 1024 [ 67.692972][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.713079][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.742378][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.762432][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.781082][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.791631][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.808954][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.821395][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.844404][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.856475][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.877921][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.906318][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.934900][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.946051][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.960664][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.973060][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.988817][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.000509][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.010900][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.021394][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.031432][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.042172][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.058040][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.094448][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.109706][ T1176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.187949][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.190797][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.216806][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.229228][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.245921][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.257427][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.267767][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.278753][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.289029][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.299820][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.311809][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.335747][ T4326] block device autoloading is deprecated and will be removed. [ 68.358703][ T4323] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8'. [ 68.369401][ T4325] md: md0 stopped. [ 68.374920][ T4323] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.383054][ T4323] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.396079][ T26] audit: type=1326 audit(1758003239.051:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4324 comm="syz.2.7" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7351213ba9 code=0x0 [ 68.418886][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.427338][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.440374][ T247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.467723][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.482776][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.493773][ T4326] md0: error: bitmap file must be a regular file [ 68.500210][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.515283][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.577001][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.579708][ T4294] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.595969][ T4294] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.602423][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.620624][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.629113][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.697762][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.715223][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.720645][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.739429][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.775104][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.791764][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.822277][ T4294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.831250][ T4294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.841151][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.028125][ T4337] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.046965][ T4340] loop0: detected capacity change from 0 to 128 [ 69.272058][ T4232] Bluetooth: hci0: command 0x0419 tx timeout [ 69.280290][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 69.287135][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 69.289198][ T4345] device syzkaller0 entered promiscuous mode [ 69.299405][ T4286] Bluetooth: hci4: command 0x0419 tx timeout [ 69.305896][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 69.331600][ T4344] process 'syz.0.1' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 69.343375][ T4174] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.532910][ T4337] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.544546][ T4349] loop1: detected capacity change from 0 to 512 [ 69.592098][ T4349] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 69.610614][ T4349] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.723296][ T4174] usb 4-1: Using ep0 maxpacket: 8 [ 69.729517][ T4337] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.845635][ T4359] loop1: detected capacity change from 0 to 16 [ 69.853934][ T4174] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 69.862741][ T4174] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 69.871110][ T4174] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.922582][ T4337] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.970106][ T4359] ======================================================= [ 69.970106][ T4359] WARNING: The mand mount option has been deprecated and [ 69.970106][ T4359] and is ignored by this kernel. Remove the mand [ 69.970106][ T4359] option from the mount to silence this warning. [ 69.970106][ T4359] ======================================================= [ 70.006403][ T4174] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 70.015474][ T4174] usb 4-1: config 0 has no interface number 0 [ 70.021843][ T4174] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 70.035716][ T4174] usb 4-1: config 0 interface 150 has no altsetting 0 [ 70.042543][ T4174] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 70.051704][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.059804][ T4359] erofs: (device loop1): mounted with root inode @ nid 36. [ 70.087080][ T4174] usb 4-1: config 0 descriptor?? [ 70.235514][ T4337] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.250820][ T4337] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.322226][ T4337] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.369073][ T4337] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.692284][ T4174] usb 4-1: USB disconnect, device number 2 [ 70.738364][ T4380] netlink: 240 bytes leftover after parsing attributes in process `syz.1.21'. [ 70.978033][ T4387] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.026034][ T4389] loop1: detected capacity change from 0 to 128 [ 71.046565][ T13] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.067407][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.214197][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.220941][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.294661][ T146] Bluetooth: Wrong link type (-22) [ 71.323362][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 71.443497][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.457879][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.469014][ T13] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 71.478769][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.490049][ T13] usb 3-1: config 0 descriptor?? [ 71.490900][ T4400] loop3: detected capacity change from 0 to 1024 [ 71.537191][ T13] hub 3-1:0.0: USB hub found [ 71.581024][ T4400] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 71.615368][ T4400] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.630422][ T4407] tipc: Started in network mode [ 71.644294][ T4407] tipc: Node identity 16476c0f9dd8, cluster identity 4711 [ 71.651830][ T4407] tipc: Enabled bearer , priority 0 [ 71.665149][ T4407] device syzkaller0 entered promiscuous mode [ 71.689573][ T4407] tipc: Resetting bearer [ 71.699885][ T4405] tipc: Resetting bearer [ 71.719708][ T4405] tipc: Disabling bearer [ 71.743584][ T13] hub 3-1:0.0: 1 port detected [ 71.806253][ T4414] loop3: detected capacity change from 0 to 256 [ 71.850196][ T4414] exfat: Deprecated parameter 'namecase' [ 71.957584][ T4414] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 71.997769][ T26] audit: type=1800 audit(1758003242.641:3): pid=4414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.35" name="bus" dev="loop3" ino=1048590 res=0 errno=0 [ 72.270490][ T4430] loop1: detected capacity change from 0 to 1024 [ 72.282945][ T4430] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 72.295550][ T4430] EXT4-fs (loop1): orphan cleanup on readonly fs [ 72.302916][ T4430] EXT4-fs error (device loop1): ext4_free_blocks:6218: comm syz.1.42: Freeing blocks not in datazone - block = 0, count = 4096 [ 72.324039][ T4430] EXT4-fs (loop1): 1 orphan inode deleted [ 72.330388][ T4430] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 72.403563][ T4246] hub 3-1:0.0: activate --> -90 [ 72.453359][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.623352][ T4246] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 72.651589][ T1326] usb 3-1: USB disconnect, device number 2 [ 72.694220][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 72.735433][ T4439] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 72.799142][ T4443] loop3: detected capacity change from 0 to 128 [ 72.813821][ T13] usb 1-1: config 0 has an invalid interface number: 150 but max is 0 [ 72.835224][ T13] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 72.869485][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.895245][ T13] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 72.904556][ T13] usb 1-1: config 0 has no interface number 0 [ 72.910686][ T13] usb 1-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 72.925230][ T13] usb 1-1: config 0 interface 150 has no altsetting 0 [ 72.932115][ T13] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 72.954717][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.982967][ T13] usb 1-1: config 0 descriptor?? [ 73.049157][ T4445] loop1: detected capacity change from 0 to 4096 [ 73.211348][ T4448] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.274204][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 73.283205][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #90!!! [ 73.292129][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #90!!! [ 73.354561][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 73.363794][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 73.373567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 73.577545][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 73.596015][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 73.605293][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 73.614545][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 74.271350][ T4183] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 74.428233][ T4183] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 75.233384][ T4459] netlink: 104 bytes leftover after parsing attributes in process `syz.3.51'. [ 75.255935][ T4462] loop1: detected capacity change from 0 to 512 [ 75.325794][ T13] usb 1-1: USB disconnect, device number 2 [ 75.361206][ T4462] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.453550][ T4462] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 75.556556][ T4462] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #15: comm syz.1.50: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 75.562126][ T4475] loop0: detected capacity change from 0 to 4096 [ 75.610589][ T4462] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.50: couldn't read orphan inode 15 (err -117) [ 75.704222][ T4462] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.840404][ T26] audit: type=1804 audit(1758003246.491:4): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.50" name="/newroot/19/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 75.916632][ T4485] loop2: detected capacity change from 0 to 512 [ 75.961687][ T4485] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.284719][ T4485] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.61: Invalid block bitmap block 0 in block_group 0 [ 76.321360][ T4485] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6178: Corrupt filesystem [ 76.386721][ T4485] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.61: attempt to clear invalid blocks 983261 len 1 [ 76.487733][ T4485] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.61: Invalid inode table block 0 in block_group 0 [ 76.605108][ T4485] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 76.622658][ T4501] loop0: detected capacity change from 0 to 1024 [ 76.645717][ T4485] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 76.739490][ T4485] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.61: Invalid inode table block 0 in block_group 0 [ 76.779984][ T4501] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 76.782309][ T4485] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5836: Corrupt filesystem [ 76.792321][ T4501] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.819503][ T4485] EXT4-fs error (device loop2): ext4_truncate:4273: inode #11: comm syz.2.61: mark_inode_dirty error [ 76.843533][ T4485] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 76.863922][ T4485] EXT4-fs error (device loop2): __ext4_get_inode_loc:4321: comm syz.2.61: Invalid inode table block 0 in block_group 0 [ 76.900033][ T4485] EXT4-fs (loop2): 1 truncate cleaned up [ 76.905847][ T4485] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,noblock_validity,,errors=continue. Quota mode: none. [ 76.959309][ T4507] loop1: detected capacity change from 0 to 256 [ 76.982453][ T4485] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.61: Invalid inode bitmap blk 0 in block_group 0 [ 77.216468][ T144] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm kworker/u4:1: bg 0: block 393: padding at end of block bitmap is not set [ 77.273405][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 8 with error 117 [ 77.277085][ T4511] block nbd2: shutting down sockets [ 77.298842][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 77.298842][ T144] [ 77.315081][ T4294] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 77.344604][ T4516] netlink: 104 bytes leftover after parsing attributes in process `syz.3.73'. [ 77.364462][ T4294] EXT4-fs (loop0): This should not happen!! Data will be lost [ 77.364462][ T4294] [ 77.391529][ T4294] EXT4-fs (loop0): Total free blocks count 0 [ 77.454904][ T4294] EXT4-fs (loop0): Free/Dirty block details [ 77.474121][ T4294] EXT4-fs (loop0): free_blocks=0 [ 77.476633][ T4520] loop1: detected capacity change from 0 to 128 [ 77.479201][ T4294] EXT4-fs (loop0): dirty_blocks=32 [ 77.500305][ T4294] EXT4-fs (loop0): Block reservation details [ 77.510607][ T4522] tipc: Started in network mode [ 77.523819][ T4294] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 77.540792][ T4522] tipc: Node identity 4aa3390ceb03, cluster identity 4711 [ 77.573094][ T4522] tipc: Enabled bearer , priority 0 [ 77.580651][ T4523] device syzkaller0 entered promiscuous mode [ 77.622009][ T4522] tipc: Resetting bearer [ 77.654828][ T4521] tipc: Resetting bearer [ 77.705889][ T4521] tipc: Disabling bearer [ 77.861555][ T4526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.70'. [ 77.892306][ T4528] loop2: detected capacity change from 0 to 256 [ 77.898745][ T4174] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 77.935060][ T4528] exfat: Unknown parameter 'zero_size_dir' [ 78.177283][ T4174] usb 4-1: Using ep0 maxpacket: 8 [ 78.344266][ T4174] usb 4-1: config 0 has an invalid interface number: 150 but max is 0 [ 78.387436][ T4174] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 78.523284][ T4174] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.564454][ T4174] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 78.591509][ T4174] usb 4-1: config 0 has no interface number 0 [ 78.608900][ T4174] usb 4-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 78.632502][ T4174] usb 4-1: config 0 interface 150 has no altsetting 0 [ 78.643245][ T4535] loop0: detected capacity change from 0 to 4096 [ 78.649987][ T4174] usb 4-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 78.659503][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.682492][ T4174] usb 4-1: config 0 descriptor?? [ 78.797383][ T4541] comedi comedi3: aio_aio12_8: I/O port conflict (0x4,32) [ 78.820320][ T4544] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.083312][ T4199] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 79.258553][ T4547] netlink: 104 bytes leftover after parsing attributes in process `syz.1.84'. [ 79.373608][ T4199] usb 3-1: Using ep0 maxpacket: 32 [ 79.493828][ T4199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.569662][ T4199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.707037][ T4199] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 79.850108][ T4199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.145990][ T4199] usb 3-1: config 0 descriptor?? [ 80.385536][ T4199] hub 3-1:0.0: USB hub found [ 80.523377][ T4199] hub 3-1:0.0: 1 port detected [ 80.651859][ T4174] usb 4-1: USB disconnect, device number 3 [ 80.677355][ T4553] tipc: Started in network mode [ 80.682288][ T4553] tipc: Node identity 4af6f7e8437e, cluster identity 4711 [ 80.713027][ T4553] tipc: Enabled bearer , priority 0 [ 80.734003][ T4558] device syzkaller0 entered promiscuous mode [ 80.744792][ T4557] loop1: detected capacity change from 0 to 128 [ 80.778847][ T4553] tipc: Resetting bearer [ 80.783503][ T4199] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 80.824414][ T4199] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 80.832185][ T4552] tipc: Resetting bearer [ 80.952399][ T4552] tipc: Disabling bearer [ 80.984595][ T4199] usbhid 3-1:0.0: can't add hid device: -71 [ 80.990726][ T4199] usbhid: probe of 3-1:0.0 failed with error -71 [ 81.063987][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.091254][ T4199] usb 3-1: USB disconnect, device number 3 [ 81.461073][ T1107] cfg80211: failed to load regulatory.db [ 82.045689][ T4578] [ 82.048087][ T4578] ============================= [ 82.052962][ T4578] WARNING: suspicious RCU usage [ 82.098373][ T4578] syzkaller #0 Not tainted [ 82.116512][ T4578] ----------------------------- [ 82.121498][ T4578] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 82.153693][ T4578] [ 82.153693][ T4578] other info that might help us debug this: [ 82.153693][ T4578] [ 82.184630][ T4578] [ 82.184630][ T4578] rcu_scheduler_active = 2, debug_locks = 1 [ 82.192819][ T4578] 1 lock held by syz.3.97/4578: [ 82.213408][ T4246] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.222581][ T4578] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 82.232747][ T4174] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.253288][ T4578] [ 82.253288][ T4578] stack backtrace: [ 82.274637][ T4578] CPU: 1 PID: 4578 Comm: syz.3.97 Not tainted syzkaller #0 [ 82.281893][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.291991][ T4578] Call Trace: [ 82.295298][ T4578] [ 82.298246][ T4578] dump_stack_lvl+0x168/0x230 [ 82.302953][ T4578] ? load_image+0x3b0/0x3b0 [ 82.307616][ T4578] ? show_regs_print_info+0x20/0x20 [ 82.312858][ T4578] ? lockdep_rcu_suspicious+0x110/0x180 [ 82.318428][ T4578] ? local_bh_enable+0x20/0x20 [ 82.323224][ T4578] rhltable_lookup+0x77b/0x790 [ 82.328021][ T4578] ? mr_mfc_find_parent+0x190/0x190 [ 82.333241][ T4578] ? mark_lock+0x94/0x320 [ 82.337598][ T4578] ? local_bh_enable+0x20/0x20 [ 82.342383][ T4578] ? mark_lock+0x94/0x320 [ 82.346827][ T4578] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 82.352837][ T4578] ? lock_chain_count+0x20/0x20 [ 82.357725][ T4578] mr_mfc_find_any_parent+0xb6/0x1e0 [ 82.363041][ T4578] ? local_bh_enable+0x20/0x20 [ 82.367839][ T4578] ip_mr_forward+0x24c/0xf90 [ 82.372470][ T4578] ipmr_mfc_add+0x2466/0x2eb0 [ 82.377213][ T4578] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 82.382173][ T4578] ? __lock_acquire+0x7c60/0x7c60 [ 82.387332][ T4578] ip_mroute_setsockopt+0xe33/0x11a0 [ 82.392656][ T4578] ? ipmr_rule_default+0x70/0x70 [ 82.397633][ T4578] ? __might_sleep+0xf0/0xf0 [ 82.402250][ T4578] ip_setsockopt+0x4ad/0x3070 [ 82.406962][ T4578] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 82.412353][ T4578] ? aa_sk_perm+0x7b4/0x8f0 [ 82.416888][ T4578] ? aa_af_perm+0x2b0/0x2b0 [ 82.421414][ T4578] ? __fget_files+0x40f/0x480 [ 82.426122][ T4578] ? aa_sock_opt_perm+0x74/0x100 [ 82.431086][ T4578] ? sock_common_setsockopt+0x32/0xb0 [ 82.436486][ T4578] ? raw_setsockopt+0xc5/0x180 [ 82.441281][ T4578] ? sock_common_recvmsg+0x1b0/0x1b0 [ 82.446598][ T4578] __sys_setsockopt+0x2bf/0x3d0 [ 82.451573][ T4578] __x64_sys_setsockopt+0xb1/0xc0 [ 82.456628][ T4578] do_syscall_64+0x4c/0xa0 [ 82.461077][ T4578] ? clear_bhb_loop+0x30/0x80 [ 82.465778][ T4578] ? clear_bhb_loop+0x30/0x80 [ 82.470487][ T4578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.476509][ T4578] RIP: 0033:0x7fd4cbd10ba9 [ 82.480963][ T4578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.500598][ T4578] RSP: 002b:00007fd4c9f78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.509049][ T4578] RAX: ffffffffffffffda RBX: 00007fd4cbf57fa0 RCX: 00007fd4cbd10ba9 [ 82.517062][ T4578] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 82.525068][ T4578] RBP: 00007fd4cbd93e19 R08: 000000000000003c R09: 0000000000000000 [ 82.533064][ T4578] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 82.541063][ T4578] R13: 00007fd4cbf58038 R14: 00007fd4cbf57fa0 R15: 00007ffcd80d3fb8 [ 82.549076][ T4578] [ 82.552151][ C1] vkms_vblank_simulate: vblank timer overrun [ 82.563341][ T4578] [ 82.567687][ T4578] ============================= [ 82.578931][ T4578] WARNING: suspicious RCU usage [ 82.585532][ T4578] syzkaller #0 Not tainted [ 82.591509][ T4578] ----------------------------- [ 82.593502][ T4246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.607325][ T4578] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 82.607348][ T4578] [ 82.607348][ T4578] other info that might help us debug this: [ 82.607348][ T4578] [ 82.607356][ T4578] [ 82.607356][ T4578] rcu_scheduler_active = 2, debug_locks = 1 [ 82.607369][ T4578] 1 lock held by syz.3.97/4578: [ 82.607381][ T4578] #0: [ 82.616273][ T4246] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.652461][ T4578] ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 82.662243][ T4578] [ 82.662243][ T4578] stack backtrace: [ 82.668628][ T4578] CPU: 0 PID: 4578 Comm: syz.3.97 Not tainted syzkaller #0 [ 82.675852][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.685928][ T4578] Call Trace: [ 82.689224][ T4578] [ 82.692174][ T4578] dump_stack_lvl+0x168/0x230 [ 82.696880][ T4578] ? load_image+0x3b0/0x3b0 [ 82.701404][ T4578] ? show_regs_print_info+0x20/0x20 [ 82.703341][ T4498] ODEBUG: Out of memory. ODEBUG disabled [ 82.706638][ T4578] ? lockdep_rcu_suspicious+0x110/0x180 [ 82.706666][ T4578] ? local_bh_enable+0x20/0x20 [ 82.706689][ T4578] rhltable_lookup+0x504/0x790 [ 82.727684][ T4578] ? local_bh_enable+0x20/0x20 [ 82.732471][ T4578] ? mr_mfc_find_parent+0x190/0x190 [ 82.737713][ T4578] ? mark_lock+0x94/0x320 [ 82.742068][ T4578] ? local_bh_enable+0x20/0x20 [ 82.746855][ T4578] ? mark_lock+0x94/0x320 [ 82.751214][ T4578] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 82.757226][ T4578] ? lock_chain_count+0x20/0x20 [ 82.762117][ T4578] mr_mfc_find_any_parent+0xb6/0x1e0 [ 82.767427][ T4578] ? local_bh_enable+0x20/0x20 [ 82.772213][ T4578] ip_mr_forward+0x24c/0xf90 [ 82.776957][ T4578] ipmr_mfc_add+0x2466/0x2eb0 [ 82.781675][ T4578] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 82.786674][ T4578] ? __lock_acquire+0x7c60/0x7c60 [ 82.791745][ T4578] ip_mroute_setsockopt+0xe33/0x11a0 [ 82.797067][ T4578] ? ipmr_rule_default+0x70/0x70 [ 82.802045][ T4578] ? __might_sleep+0xf0/0xf0 [ 82.806661][ T4578] ip_setsockopt+0x4ad/0x3070 [ 82.811376][ T4578] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 82.816768][ T4578] ? aa_sk_perm+0x7b4/0x8f0 [ 82.821303][ T4578] ? aa_af_perm+0x2b0/0x2b0 [ 82.825830][ T4578] ? __fget_files+0x40f/0x480 [ 82.827756][ T4174] usb 3-1: Using ep0 maxpacket: 8 [ 82.830530][ T4578] ? aa_sock_opt_perm+0x74/0x100 [ 82.840501][ T4578] ? sock_common_setsockopt+0x32/0xb0 [ 82.845892][ T4578] ? raw_setsockopt+0xc5/0x180 [ 82.850673][ T4578] ? sock_common_recvmsg+0x1b0/0x1b0 [ 82.855979][ T4578] __sys_setsockopt+0x2bf/0x3d0 [ 82.860854][ T4578] __x64_sys_setsockopt+0xb1/0xc0 [ 82.865900][ T4578] do_syscall_64+0x4c/0xa0 [ 82.870335][ T4578] ? clear_bhb_loop+0x30/0x80 [ 82.875028][ T4578] ? clear_bhb_loop+0x30/0x80 [ 82.879723][ T4578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 82.885645][ T4578] RIP: 0033:0x7fd4cbd10ba9 [ 82.890080][ T4578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.909703][ T4578] RSP: 002b:00007fd4c9f78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 82.918147][ T4578] RAX: ffffffffffffffda RBX: 00007fd4cbf57fa0 RCX: 00007fd4cbd10ba9 [ 82.926248][ T4578] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 82.934236][ T4578] RBP: 00007fd4cbd93e19 R08: 000000000000003c R09: 0000000000000000 [ 82.942225][ T4578] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 82.950216][ T4578] R13: 00007fd4cbf58038 R14: 00007fd4cbf57fa0 R15: 00007ffcd80d3fb8 [ 82.958225][ T4578] [ 82.963666][ T4246] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 82.972844][ T4246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.990382][ T4246] usb 2-1: config 0 descriptor?? [ 83.047101][ T4174] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 83.060134][ T4174] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.071471][ T4174] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.108621][ T4174] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 83.117967][ T4174] usb 3-1: config 0 has no interface number 0 [ 83.124429][ T4174] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.157027][ T4174] usb 3-1: config 0 interface 150 has no altsetting 0 [ 83.183752][ T4174] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 83.192927][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.209813][ T4578] [ 83.212271][ T4578] ============================= [ 83.218580][ T4578] WARNING: suspicious RCU usage [ 83.228831][ T4578] syzkaller #0 Not tainted [ 83.235289][ T4578] ----------------------------- [ 83.242469][ T4174] usb 3-1: config 0 descriptor?? [ 83.248657][ T4578] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 83.259631][ T4578] [ 83.259631][ T4578] other info that might help us debug this: [ 83.259631][ T4578] [ 83.276528][ T4578] [ 83.276528][ T4578] rcu_scheduler_active = 2, debug_locks = 1 [ 83.287465][ T4578] 1 lock held by syz.3.97/4578: [ 83.292430][ T4578] #0: ffffffff8d238048 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x105/0x11a0 [ 83.309658][ T4578] [ 83.309658][ T4578] stack backtrace: [ 83.316164][ T4578] CPU: 0 PID: 4578 Comm: syz.3.97 Not tainted syzkaller #0 [ 83.323388][ T4578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 83.333465][ T4578] Call Trace: [ 83.336763][ T4578] [ 83.339708][ T4578] dump_stack_lvl+0x168/0x230 [ 83.344408][ T4578] ? load_image+0x3b0/0x3b0 [ 83.348936][ T4578] ? show_regs_print_info+0x20/0x20 [ 83.354167][ T4578] ? lockdep_rcu_suspicious+0x110/0x180 [ 83.359737][ T4578] ? local_bh_enable+0x20/0x20 [ 83.364618][ T4578] rhltable_lookup+0x5f8/0x790 [ 83.369409][ T4578] ? local_bh_enable+0x20/0x20 [ 83.374183][ T4578] ? mr_mfc_find_parent+0x190/0x190 [ 83.379449][ T4578] ? mark_lock+0x94/0x320 [ 83.383805][ T4578] ? local_bh_enable+0x20/0x20 [ 83.388583][ T4578] ? mark_lock+0x94/0x320 [ 83.392917][ T4578] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 83.398900][ T4578] ? lock_chain_count+0x20/0x20 [ 83.403757][ T4578] mr_mfc_find_any_parent+0xb6/0x1e0 [ 83.409070][ T4578] ? local_bh_enable+0x20/0x20 [ 83.413849][ T4578] ip_mr_forward+0x24c/0xf90 [ 83.418529][ T4578] ipmr_mfc_add+0x2466/0x2eb0 [ 83.423223][ T4578] ? ipmr_mfc_delete+0x5c0/0x5c0 [ 83.428181][ T4578] ? __lock_acquire+0x7c60/0x7c60 [ 83.433240][ T4578] ip_mroute_setsockopt+0xe33/0x11a0 [ 83.438648][ T4578] ? ipmr_rule_default+0x70/0x70 [ 83.443607][ T4578] ? __might_sleep+0xf0/0xf0 [ 83.448203][ T4578] ip_setsockopt+0x4ad/0x3070 [ 83.452895][ T4578] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 83.458262][ T4578] ? aa_sk_perm+0x7b4/0x8f0 [ 83.462768][ T4578] ? aa_af_perm+0x2b0/0x2b0 [ 83.467274][ T4578] ? __fget_files+0x40f/0x480 [ 83.472039][ T4578] ? aa_sock_opt_perm+0x74/0x100 [ 83.476980][ T4578] ? sock_common_setsockopt+0x32/0xb0 [ 83.482355][ T4578] ? raw_setsockopt+0xc5/0x180 [ 83.487139][ T4578] ? sock_common_recvmsg+0x1b0/0x1b0 [ 83.492429][ T4578] __sys_setsockopt+0x2bf/0x3d0 [ 83.497596][ T4578] __x64_sys_setsockopt+0xb1/0xc0 [ 83.502644][ T4578] do_syscall_64+0x4c/0xa0 [ 83.507073][ T4578] ? clear_bhb_loop+0x30/0x80 [ 83.511763][ T4578] ? clear_bhb_loop+0x30/0x80 [ 83.516453][ T4578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.522362][ T4578] RIP: 0033:0x7fd4cbd10ba9 [ 83.526795][ T4578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.546530][ T4578] RSP: 002b:00007fd4c9f78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.554959][ T4578] RAX: ffffffffffffffda RBX: 00007fd4cbf57fa0 RCX: 00007fd4cbd10ba9 [ 83.562938][ T4578] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 83.570911][ T4578] RBP: 00007fd4cbd93e19 R08: 000000000000003c R09: 0000000000000000 [ 83.578883][ T4578] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 83.586859][ T4578] R13: 00007fd4cbf58038 R14: 00007fd4cbf57fa0 R15: 00007ffcd80d3fb8 [ 83.594852][ T4578] [ 84.263683][ T4246] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 84.308102][ T4246] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 84.416545][ T4246] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 84.501017][ T4246] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 84.566774][ T4246] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 84.697106][ T4246] usb 2-1: USB disconnect, device number 2 [ 84.998805][ T4174] usb 3-1: USB disconnect, device number 4 [ 85.132526][ T4498] Set syz1 is full, maxelem 65536 reached [ 85.244368][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.150/sound/card3/controlC3/../uevent} for writing: No such file or directory